Analysis
- max time kernel
148s - max time network
144s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
10/09/2026, 03:42
General
- Target jaffacakes118_Detektiv Conan - 1. Film_ Der tickende Wolkenkratzer XviD-Avi .exe
- Size 2.5MB
- Sample260910-d9g1ysytex
- SHA256 a102f13c6d9b95ead795dddcb275d70953bebd1b497bd60817bb053302ff507d
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Detektiv Conan - 1. Film_ Der tickende Wolkenkratzer XviD-Avi .exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Detektiv Conan - 1. Film_ Der tickende Wolkenkratzer XviD-Avi .exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/808-0-0x00007FF96A7CA000-0x00007FF96A7CB000-memory.dmp
memory/808-1-0x00007FF96A4D0000-0x00007FF96AF08000-memory.dmp
memory/808-2-0x000000001BE80000-0x000000001C34E000-memory.dmp
memory/808-3-0x000000001C3F0000-0x000000001C48C000-memory.dmp
memory/808-5-0x00007FF96A4D0000-0x00007FF96AF08000-memory.dmp
memory/808-4-0x000000001C500000-0x000000001C562000-memory.dmp
memory/808-6-0x000000001CA40000-0x000000001CB10000-memory.dmp
memory/808-8-0x00007FF96A4D0000-0x00007FF96AF08000-memory.dmp
memory/808-9-0x00007FF96A4D0000-0x00007FF96AF08000-memory.dmp
memory/808-10-0x00007FF96A4D0000-0x00007FF96AF08000-memory.dmp
memory/808-11-0x00007FF96A4D0000-0x00007FF96AF08000-memory.dmp
memory/808-12-0x0000000001370000-0x0000000001378000-memory.dmp
memory/808-13-0x00007FF96A4D0000-0x00007FF96AF08000-memory.dmp
memory/808-14-0x00007FF96A4D0000-0x00007FF96AF08000-memory.dmp
memory/808-15-0x00007FF96A4D0000-0x00007FF96AF08000-memory.dmp
memory/808-16-0x00007FF96A4D0000-0x00007FF96AF08000-memory.dmp
memory/808-17-0x00007FF96A4D0000-0x00007FF96AF08000-memory.dmp
memory/808-19-0x00007FF96A4D0000-0x00007FF96AF08000-memory.dmp
memory/808-18-0x00007FF96A4D0000-0x00007FF96AF08000-memory.dmp
memory/808-20-0x00007FF96A4D0000-0x00007FF96AF08000-memory.dmp
memory/808-21-0x00007FF96A4D0000-0x00007FF96AF08000-memory.dmp
memory/808-22-0x00007FF96A4D0000-0x00007FF96AF08000-memory.dmp